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DETAILED ACTION 



Response to Amendment 
This office action is in response to amendment filed on January 17, 2006. Original 
application contained Claims 1-38. Applicant previously amended Claim l.No amendment was 
filed this time. Therefore, presently claims 1-38 are pending. 



Response to Arguments 
1. Apphcant's arguments with respect to claims 1-38 have been considered but are moot in 
view of the new groimd(s) of rejection. 



Claim Rejections - 35 USC §103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

1. Claims 1-38 are rejected under 35 U.S.C. 103(a) as being unpatentable over by Glass (U. 



S. Patent 6,553,494), and further in view of Sudia (U. S. Patent 5,659,617). 
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2. Regarding Claim 1, Glass teaches and describes an electronic signature device 
comprising a processor, a memory, a user input device including a first signature input device, 
and a device interface, all commemoratively connected by at least one bus, a method of 
personaUzing the electronic signature device to a user (Fig. 1-5), comprising: 

receiving a digitized written user signature of the user via the first signature input device, 
generating a user public key based on said signing private key and said prime and 
base parameters; generating a biometric electronic template based on said digitized written user 
signature; and storing said prime, sub-prime, and base parameters, said signing private and 
pubUc keys, and said biometric electronic template in the memory (col.7 line 36 to col.9 line 52). 

Although the system disclosed by Glass shows all the features of the claimed limitation, 
but Glass does not specifically disclose generating a prime parameter, a sub-prime parameter, 
and a base parameter; generating a signing private key; generating a signing public key based on 
said prime, sub-prime, and base parameters. 

In an analogous art, Sudia, on the other hand discloses computing environment that 
relates to methods and apparatus for securely using digital signature in a cryptographic system 
by generating a prime parameter, a sub-prime parameter, and a base parameter; generating a 
signing private key; generating a signing public key based on said prime, sub-prime, and base 
parameters (i.e. multiple attributes)(col.l3 line 18 to line 33). 

Therefore, It would have been obvious to one ordinary skilled in the art at the time of invention 
to combine the teachings of Glass and Sudia, because Sudia's method of encrypting/decrypting 
of monitored data by using published primary keys with multiple attributes would not only 
promote security structure in the system of Glass during receiving digitized data fi-om host input 
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computing devices but will also provide safeguards against attempt by unauthorized person to 
breach security of system. 

3. Regarding Claim 26, Glass teaches and describes an electronic signature device 
comprising a processor, a memory having a biometric electronic template, a prime parameter, a 
sub-prime parameter, and a base parameter, user public data comprising a user public key, and a 
user private key stored therein, a user interface comprising a signatme input device, a device 
interface adapted to interface a computer, and at least one bus operably connected to the 
processor, the memory, the user interface, and the device interface, a method of originating an 
electronically signed transaction (Fig. 1-5), said method comprising: 

verifying whether a user is permitted to originate the electronically signed transaction with the 
electronic signature device, comprising: receiving a digitized written originator signature via the 
user interface, and comparing said digitized mitten originator signature against the biometric 
electronic template to produce a first verification resuh; receiving a transaction package through 
one of the user interface and the device interface; combining said transaction package and one of 
said digitized originator signature and a digitized user signature extracted firom the biometric 
electronic template to produce an originator signature block; generating an ephemeral private key 
based on the prime, sub-prime, and base parameters;, the user public key, and the prime 
parameter; encrypting said originator signature block with said shared encryption key to produce 
an encrypted signature block; combining said encrypted signature block, said ephemeral private 
key, the prime parameter, and at least a portion of the user public data to produce an 
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electronically signed transaction; and if the user is verified, providing said electronically signed 

transaction via the device interface (col.7 line 36 to col.9 line 52). 

Although the system disclosed by Glass shows all the features of the claimed limitation, 

but Glass does not specifically disclose generating an ephemeral public key based on said 

ephemeral private key and the prime and base parameters; generating a shared encryption key 

based on said ephemeral public key. 

In an analogous art, Sudia, on the other hand discloses computing environment that 
relates to methods and apparatus for securely using digital signatiu"e in a cryptographic system 
by generating a prime parameter, a sub-prime parameter, and a base parameter; generating a 
signing private key; generating a signing pubUc key based on said prime, sub-prime, and base 
parameters (i.e. multiple attributes)(coL13 line 18 to line 33). 

Therefore, It would have been obvious to one ordinary skilled in the art at the time of invention 
to combine the teachings of Glass and Sudia, because Sudia's method of encrypting/decrypting 
of monitored data by using published primary keys with multiple attributes would not only 
promote security structure in the system of Glass during receiving digitized data fi-om host input 
computing devices but will also provide safeguards against attempt by unauthorized person to 
breach security of system. 

4. Claims 2-25, and 27-37 are rejected applied as above rejecting claims 1, and 26. 
Furthermore, the system of Glass and Sudia teaches and describes, wherein: 



Application/Control Number: 1 0/035,8 1 7 Page 6 

Art Unit: 2131 

As per claims 2-4, and 27, said prime, sub-prime, and base parameters are based on 
Diffie-Helbnan parameters, and said prime, sub-prime, and base parameters are generated based 
on a seed value, and the seed value is one of a random value and a pseudorandom number 
(Glass:col.l line 60 to col.2 line 20, and Sudia: col.l31ine 18 to line 33). 

As per Claim 5, the seed value is received from the user via the user interface (col.2 line 
21 to line 30). 

As per Claim 6 the user interface further comprises a password input device, and said 
method further comprises: receiving a user password via the password input device; generating a 
password encryption key based on the user password; encrypting a known value with the 
password encryption key to produce an encrypted output; and storing the encrypted known value 
in the memory (Glass:col.4 line 26 to line 56). 

As per Claim 7, and 29, said known value is said biometrics electronic template 
(Glass:coL4 col.5 line 12 to line 30, and col.9 line 10 to line 15). 

As per Claims 8-17, and 30-31, receiving said digitized user signature is repeated at least 
once, receiving said digitized user signature and generating said biometrics electronic template 
are repeated at least once, said biometric electronic template is generated based on a mathematic 
transformation of said digitized written user signature, the mathematical transformation is a 
Fourier transformation, the electronic signature device is communicatively connected to a 
certificate authority via the device interface, and said method further comprises: sending a 
certificate request to the certificate authority; receiving a certificate package from the certificate 
authority, and storing said certificate package in the memory, said certificate request comprises 
said user public key, said certificate request further comprises at least one of said prime, sub- 
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prime, and base parameters, said certificate request comprises said user public key and said 
prime parameter, said certificate package comprises a digital certificate, and said certificate 
package comprises a digital certificate and a root value (Glass: col.4 coL3 line 29 to line 67). 

As per Claims 18-23, the device interface is a card interface, the electronic signature 
device fiirther comprises a power source that is at least one of a battery and the computer 
interface, the first signature input device is integral with the electronic signature device, the first 
signature input device is connected to the at least one bus through the device interface, and at 
least a portion of said user interface is integral with the electronic signature device, and at least a 
portion of said user interface is connected to the at least one bus through the device interface 
(Glass: Fig.3-5, and coL6 line 47 to col.7 line 12). 

As per claims 24-25, said user public key is one of a random nxmiber and a 
pseudorandom number, and said user public key is smaller than said sub-prime parameter (Glass: 
col.3 line 51 to line 64, and Sudia: col 131ine 18 to line 33)). 

As per Claim 28, the user interface fiirther comprises a password input device, the 
memory has fiirther stored therein an encrypted known value, and verifying whether the user is 
permitted to originate the electronically signed transaction with the electronic signature device 
fiuther comprises receiving a user password via the password input device; generating a 
password encryption key based on the user password; decrypting the encrypted known value 
with said password encryption key to produce a second verification result (Glass: coL4 line 26 to 
line 56). 

As per Claim 32, comparing said digitized written originator signature against the 
biometric electronic template comprises: generating a temporary template based on said digitized 
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written originator signature, and comparing said temporary template to the biometric electronic 
template (Glass: col.6 line 28 to line 60, and col.9 line 16 to line 36). 

As per Claim 35, said digitized mitten originator signature against the biometric 
electronic template comprises: generating a temporary signature based on the biometric 
electronic template, and comparing said temporary signature to said digitized written originator 
signature (Glass: col.6 line 28 to line 60, and col.9 line 16 to line 36). 

As per Claim 33-34, and 36-38, said temporary template is generated based on a 
mathematic transformation of said digitized written originator signature, the mathematical 
transformation is a Fourier transformation, and the at least a portion of the user public data 
comprises the user public key (Glass: col.3 line 29 to line 67). 

Conclusion 

Any inquiry conceming this communication or earlier communications from the 
examiner should be directed to Syed Zia whose telephone number is 571-272-3798. The 
examiner can normally be reached on 9:00 to 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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